Security Intelligence Podcast

IBM

Security Intelligence is a weekly news podcast for cybersecurity pros who need to stay ahead of fast-moving threats. Each week, we cover the latest threats, trend, and stories shaping the digital landscape, alongside expert insights that help make sense of it all. Whether you’re a builder, defender, business leader or simply curious about how to stay secure in a connected world, you’ll find timely updates and timeless principles in an accessible, engaging format. New episodes weekly on Wednesdays at 6am EST.

  1. fa 15 h

    The new post-quantum cryptography executive order. Plus: What is Q-Day, really?

    Learn more about Q-Day → https://www.ibm.com/think/news/q-day-has-already-begun-are-you-ready On June 22, US President Donald Trump signed a pair of executive orders for the quantum computing, and post-quantum future. On this episode, Mason Molesky breaks down the post-quantum EOs: “Securing the Nation Against Advanced Cryptographic Attack,” which establishes a government‑wide mandate to accelerate the United States’ transition to post‑quantum cryptography. Mason covers what it is, why you should care and what you should do. Then: Suja Visewesan and Mark Hughes join host Matt Kosinski to discuss Q-Day, the anticipated future day when quantum computing will become “cryptographically relevant” — or put another way: powerful, reliable and accessible enough to make our current approach to public key cryptography obsolete. But what if Q-Day isn’t a day at all? What if it’s a process—a long, slow evolution rather than a sudden leap? And what if it’s already happening right now, under our noses? We chat about the risks—and benefits!—of quantum computing to cybersecurity, the reality of and post-quantum cryptography and how organizations can become “crypto-agile” to keep up with the rapid pace of change. All that and more on Security Intelligence. 00:00 – Introduction 01:23 – Post-quantum cryptography executive order 13:30 – What is Q-Day? Read Suja and Mark’s article → https://www.ibm.com/think/perspectives/quantum-computers-are-speeding-towards-cryptographic-relevancy The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.

    44 min
  2. Patch management is dead. Here’s what’s taking it place

    fa 5 dies

    Patch management is dead. Here’s what’s taking it place

    Patch management, as most organizations practice it, is fundamentally broken. It treats what should be a strategic, risk-informed decision as a checkbox item. And checkboxes don't get done. The fix isn't better patching. It's exposure management: a risk-based approach that connects your vulnerabilities to your business context, your attack surface and the real-world threat landscape. In this episode of Security Intelligence, IBM X-Force North America Leader of Incident Response Ryan Anschutz walks us through why patch management fails, what exposure management does differently and what it all means for defenders right now. Ryan shares war stories from the field, including a firmware vulnerability that turned into a multi-continent ransomware outbreak and a MOVEit response that kept one organization out of the headlines while its competitors made them for all the wrong reasons. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence Subscribe to the IBM Think newsletter: https://www.ibm.com/forms/news-mkt-52954 Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence Learn more about cybersecurity: https://www.ibm.com/think/security "How IBM Can help" component at the bottom driving to www.ibm.com/products/guardium-ai-security and www.ibm.com/solutions/data-security

    22 min
  3. Have we finally solved social engineering? Plus: World Cup fraud, AI IDs and an IBM/OpenAI collab

    24 de juny

    Have we finally solved social engineering? Plus: World Cup fraud, AI IDs and an IBM/OpenAI collab

    Read more about IBM joining OpenAI Daybreak → https://newsroom.ibm.com/2026-06-22-ibm-and-openai-bring-frontier-ai-to-cyber-defense-helping-enterprises-keep-pace-with-machine-speed-threats Social engineering has plagued human beings since time immemorial. We’ve simply never been able to stop it. Until now. Maybe. On this episode of Security Intelligence, panelists Dave Bales, Kimmie Farrington and JR Rao dig into the idea that AI-native operating systems could do to phishing what endpoint protection did to viruses. Then: the World Cup is here, and so are the scammers. We discuss Operation FanTrap, Cyble Research and Intelligence Labs’ deep dive into 4,000 malicious domains using fraudulent FIFA branding to steal credentials, drain wallets and spread malware. Plus, Estonia wants to give AI agents their own personal IDs, and IBM joins OpenAI’s Daybreak Cyber Partner Program. All that and more on Security Intelligence. 00:00 -- Introduction 1:30 -- The end of social engineering? 14:53 -- World Cup fraud 25:08 -- IDs for AI agents 33:02 -- IBM joins OpenAI Daybreak Visit Security Intelligence podcast page to get more AI content → https://www.ibm.com/think/podcasts/security-intelligence

    39 min
  4. AI agents can manage your passwords. Should we let them? Plus: The biggest Patch Tuesday ever.

    17 de juny

    AI agents can manage your passwords. Should we let them? Plus: The biggest Patch Tuesday ever.

    Apple unveiled an AI agent that can detect if your password’s been compromised and change it for you. The question is: Should you let it? On this episode of Security Intelligence, Michelle Alvarez, Erblind Morina and Austin Zeizel join host Matt Kosinski to discuss the promise and pitfalls of using AI agents to address the pernicious issue of cybersecurity hygiene. As people, we’re not great at it. But are the agents ready for primetime? Then, we talk about Microsoft’s biggest Patch Tuesday ever: more than 200 distinct CVEs were covered in the June 2026 release. We talk about why this might just be the beginning of a new era in vulnerability management, and why it matters. Spoiler: It’s not really about the numbers. Finally, we get into a report that C-suite executives are increasingly willing to take on greater cyber risk in exchange for innovation. Some say it’s a reaction after years of security spending with low ROI—but are they overcorrecting? All that and more on Security Intelligence. 00:00 -- Intro 1:13 -- AI agents can fix your passwords 10:36 -- The biggest Patch Tuesday ever 19:46 -- Executives embrace cyber risk Visit Security Intelligence podcast page to get more security content → https://www.ibm.com/think/podcasts/security-intelligence

    30 min
  5. Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem

    10 de juny

    Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem

    If you just ask an AI nicely enough, you can get it to hand over the keys to a total stranger’s Instagram account. But people can be tricked, too. So what’s the difference? Is there any? This week on IBM’s Security Intelligence, Jeff Crume, Claire Nunez and Nick Bradley join host Matt Kosinski to dig into what happens when social engineering meets AI. We cover the Meta/Instagram prompt injection attack, a new self-replicating AI worm out of the University of Toronto that can reason its way through a network and the Sophos State of Identity Security 2026 report, which found that nonhuman identities (NHIs) are responsible for a sizable chunk of identity-based data breaches. Are AI agents more gullible than humans? Is the AI worm a genuine leap forward for attackers, or just another proof-of-concept? And why are so few organizations bothering to audit and rotate their nonhuman credentials? All that and more on Security Intelligence. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence

    33 min
  6. Project Lightwell brings open source security into the AI era

    3 de juny

    Project Lightwell brings open source security into the AI era

    Open source software powers more than 90% of Fortune 500 companies. It also powers a growing number of cyberattacks. This week on Security Intelligence, we dig into IBM and Red Hat's $5 billion answer to that problem: Project Lightwell, a massive investment in AI-augmented engineers and a trusted security clearinghouse designed to shore up the open source ecosystem from the inside out. We also break down SymJack, a clever new attack technique that turns AI coding agents against themselves by tricking them into overwriting their own configuration files. And the most worrisome part is how it gets around human-in-the-loop checks. And: LayerX's "State of AI Usage Report 2026" shows AI adoption isn't spreading evenly across organizations. We explore what it means for cybersecurity pros when AI fragments throughout the software supply chain while simultaneously concentrating in the hands of a few power users. Segments: 00:00 - Intro 1:05 - Project Lightwell 12:51 - SymJack 26:11 - AI usage in 2026 The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence

    35 min
  7. Multi-model AI environments are the future. Can we secure them?

    29 de maig

    Multi-model AI environments are the future. Can we secure them?

    Today, the average enterprise network is like one big game of Telephone: Critical data flows between apps and assets, software systems and their subcomponents, on-prem laptops and cloud storage buckets. Every single gap between the pieces—every single transaction—is a possible vulnerability, a chance to hackers to get in or data to get scrambled. And the introduction of multiple AI models is only making things trickier. Data passes between models, transforms in ways no one fully understands, and emerges on the other side as something you didn't quite expect. In this episode of IBM’s Security Intelligence, Vishal Kamat, VP of Data Security at IBM, walks us through the security challenges of the multi-model AI world: the black box problem, the accountability gap, shadow AI, agent session smuggling, and why less than 1% of enterprise data is actually in models today, even as everyone scrambles to build AI applications. It's Telephone all the way down. But someone has to make sure the message gets through clean. The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity. Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence

    17 min
  8. First findings from Project Glasswing

    27 de maig

    First findings from Project Glasswing

    While Anthropic has restricted Mythos access to its Project Glasswing partners, it has always maintained that lessons from Glasswing would be shared with the broader cybersecurity community. Now, those lessons are starting to roll out. This week, on Security Intelligence, panelists Dustin “EvilMog” Heywood, Kimmie Farrington and Curtis Pitts discuss Cloudflare’s recent write-up on its adventures with Mythos so far. We discuss what separates Mythos from other AI vulnerability hunters, Cloudflare’s agentic harness and whether “speed” is the wrong way to think about AI cybersecurity tools. Then: A CISA contractor accidentally exposed a repo full of cloud keys, passwords, tokens and other credentials to the public web on GitHub. It’s a case study in identity and access management mistakes and supply chain vulnerabilities—and there’s a lot to learn from ti. Finally, we look back on L0pht Day, 1998, when a group of Boston-area hackers warned Congress about the fundamentally inadequate security measures of the early internet. Have we made any progress since then? Maybe not as much as you think. All that and more, on Security Intelligence.

    33 min
Veure-ho tot (51)

Informació

Security Intelligence is a weekly news podcast for cybersecurity pros who need to stay ahead of fast-moving threats. Each week, we cover the latest threats, trend, and stories shaping the digital landscape, alongside expert insights that help make sense of it all. Whether you’re a builder, defender, business leader or simply curious about how to stay secure in a connected world, you’ll find timely updates and timeless principles in an accessible, engaging format. New episodes weekly on Wednesdays at 6am EST.

Fitxa tècnica

També et pot agradar